e-business Application Solutions on OS/390 Using ... - IBM Redbooks

SSL Security Customization for Non-SSL Mode: If you followed our
recommendation and started with the supplied sample configuration file as shipped,
the configuration directives shown in Figure 14 on page 31 appear in your
configuration file. They are related to SSL security.
SSLClientAuth off
sslmode on
sslport 443
normalmode on
keyfile key.kdb
Figure 14. SSL Directives in IBM-Supplied Configuration File (httpd.conf)
keyfile
There is no requirement to change these parameters.
Note: However, if you leave these parameters as is, you will get the following
error message, which can be seen in the httpd.errors log when starting the server:
+5 SSL support initialization failed,
server will run only in non-secure mode without listening on ssl port
This message indicates that no setup has been done for SSL. However, the
Webserver can still be used as a normal “non-secure” server.
You can avoid getting these errors by commenting out the directives shown in
Figure 14.
If you want to set up SSL, refer to Enterprise Web Serving with the Lotus Domino
Go Webserver for OS/390, SG24-2074.
4.1.2 Locating Your Web Content
This section shows you how and where to set up your own Web content without
affecting or being affected by the IBM Web content that is provided with Domino Go
Webserver. This is important because if you place your own Web content in the
file system that IBM provides, you might find it difficult to upgrade to another
version of the Webserver, or even apply maintenance.
4.1.2.1 Standard Lotus Domino Go Webserver Release 5.0
Content Setup
The Lotus Domino Go Webserver Release 5.0 server is defined to look for Web
pages in /usr/lpp/internet/server_root/pub, with some exceptions for “special pages”
(such as remote configuration forms). This is enforced by the definitions shown in
Figure 15 on page 32.
Chapter 4. Configuration of the OS/390 Web Server 31